37738 matches found
WordPress Ungapped Widgets plugin <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Ungapped Widgets versions = 1...
WordPress Geopost plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Geopost versions = 1.2...
WordPress WP BBCode plugin <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin WP BBCode versions = 1.8.1...
WordPress The Total Book Project plugin <= 1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Book Manipulation vulnerability
Insecure Direct Object Reference to Authenticated Contributor+ Book Manipulation vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin The Total Book Project versions = 1.0...
EUVD-2025-53424
Malicious code in low-brown-horse npm...
EUVD-2025-53423
Malicious code in low-emerald-newt npm...
Malicious code in low-blush-pony (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba451773a70401a6629dbc11f15501114ed930db0e076d834a06bd5207f6e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53426
Malicious code in low-blush-fly npm...
Malicious code in low-emerald-newt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd465894607f8f64822601c6fef7eaaf49c5c9c639034ac477092e73523d837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53425
Malicious code in low-blush-pony npm...
EUVD-2025-53422
Malicious code in low-green-dragonfly npm...
WordPress Add Multiple Marker plugin <= 1.2 - Missing Authorization to Unauthenticated Settings Update vulnerability
Missing Authorization to Unauthenticated Settings Update vulnerability discovered by Bhayanak Atma in WordPress Plugin Add Multiple Marker versions = 1.2...
CVE-2025-31719
In TEE EcDSA algorithm, there is a possible memory consistency issue. This could lead to generated incorrect signature results with low probability...
CVE-2025-42899
CVE-2025-42899 affects SAP S4CORE (Manage journal entries). The authenticated user can exploit missing authorization checks to escalate privileges within the application. The described impact is limited to confidentiality (low) with no noted impact on integrity or availability. According to the p...
CVE-2025-42899 Missing Authorization check in SAP S4CORE (Manage Journal Entries)
SAP S4CORE Manage journal entries does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges. This has low impact on confidentiality of the application with no impact on integrity and availability of the application...
CVE-2025-42899 Missing Authorization check in SAP S4CORE (Manage Journal Entries)
SAP S4CORE Manage journal entries does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges. This has low impact on confidentiality of the application with no impact on integrity and availability of the application...
CVE-2025-42897 Information Disclosure vulnerability in SAP Business One (SLD)
Due to information disclosure vulnerability in anonymous API provided by SAP Business One SLD, an attacker with normal user access could gain access to unauthorized information. As a result, it has a low impact on the confidentiality of the application but no impact on the integrity and...
CVE-2025-42897 Information Disclosure vulnerability in SAP Business One (SLD)
Due to information disclosure vulnerability in anonymous API provided by SAP Business One SLD, an attacker with normal user access could gain access to unauthorized information. As a result, it has a low impact on the confidentiality of the application but no impact on the integrity and...
CVE-2025-42897
CVE-2025-42897 describes an information disclosure vulnerability in the anonymous API of SAP Business One Service Layer Directory (SLD). An attacker with normal user access could obtain unauthorized information, resulting in low confidentiality impact and no impact on integrity or availability. A...